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IN THE CLAIMS 
Amended claims follow: 

1 . (Currently Amended) A computer program product for controlling a computer to 
generate mobile computing device malware definition data for use by a mobile 
computing device malware scanner executable upon a mobile computing device, said 
computer program product comprising: 

obtaining code operable to obtain from a data source master malware definition 
data, said master malware definition identifying a plurality of items of malware each 
belonging to one of a plurality of classes of malware threat; 

identifying code operable to identify one or more classes of malware threat 
against vrfiich said mobile computing device is to be protected; and 

generating code operable to generate fix>m said master malware defmition data 
said mobile computing device malware definition data, said mobile computing device 
malware definition data identifying items of malware identified within said master 
malware definition data which are within classes of malware threat against uliich said 
mobile computing device is to be protected^ 

wherein said obtaining code, said identifidng code and said ge nerating code are 
executed bv a fixed location computing device, said fixed location computer being 
operable to transfer to said mobile computing device one or more computer files 
including at least a computer fil e contftini ^g said mobile computer device malware 
definition data: 

wherein said fixed location computing device stores profile data identifying one 
or more d ifferent types of mobile oomnuting device to which said fixed location 
computing device mav transfer computer files and cor responding threat data identifying 
one or more classes of malware threat to which each of said mobile con^p i 4 tiTig ^^yjces is 
vulnerable: 

wherein only a subset of said master malware definition is used to generate said 
mobile computing device malwa ra Hftfini rion data for tailoring said mobile computing 
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device malware definition data to accommodate only malware threats to which said 
mobile c omputing devices is vulnerable . 

2. (Cancelled) 

3. (Currently Amended) A computer program product as claimed in claim [2]!, 
wherein said fixed location computing device is a user computer having conmiunication 
link with said mobile computing device. 

4. (Currently Amended) A computer program product as claimed in claim [2]!^ 
whereitx, when said mobile computing device is connected to said fixed location 
computing device, different versions of user generated computer files respectively stored 
by said mobile computing device and said fixed location computing device are 
gvachroms e d svnchronizcd . 

5 . (Cunently Amended) A computer program product as claimed in claim 4, 
wherein said mobile computing device malware definition data is transferred firom said 
fixed location computing device to said mobile computing device during said 



6. (Original) A computer program product as claimed in claim 4, when said mobile 
computing device is connected to said fixed location computing device, versions of said 
mobile computing device malware definition data stored on said mobile computing 
device and said fixed location computing device are compared, and, if said fixed location 
computing device has a more up-to-date version of sdd mobile computing device 
malware definition data, then said more i^-to-date version of said mobile computing 
device malware definition data is transfexred from said fixed location computing device 
to said mobile computing device. 

7. (Cancelled) 
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8. (Currently Amended) A computer program product as claimed in claim [7]l^ 
wherein user controlled policy data is used in combination with said threat data to control 
against which classes of malware threat said mobile computing device is protected by 
said mobile computing device malware definition data. 

9. (Currently Amended) A computer program product as claimed in claim [7]L 
wherein said different types of mobile computing device correspond to different types of 
operating system computer program used by mobile computing devices. 

10. (Currently Amended) A computer program product as claimed in claim [7]i, 
wherein said fixed location computer device detects to which mobile computing devices 
it may transfer computer files by detecting installation upon said fixed location 
computing device of one or more transfer controlling computer programs operable to 
control transfer of computer files to one or more predetermined mobile computing 
devices. 

1 1 . (Currently Amended) A computer program product as claimed in claim [2]!, 
wherein fixed location computing device also transfers a malware scanner computer 
program from said data source to said mobile computing device. 

12. (Currently Amended) A computer program product as claimed in claim [2]1, 
wherein said fixed location computing device checks for updated master malware 
definition data becoming available from said data source and, if such updated master 
malware definition data becomes available, then repeats said steps of obtaining, 
identifying and generating. 

13. (Original) A computer program product as claimed m claim 1 1, wherein said 
fixed location computing device checks for an updated malware scanner computer 
program becoming available from said data source and, if such an updated malware 
scanner computer program become available, then obtains said updated malware scanner 
computer program for transfer to said mobile computing device. 
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14. (Currently Amended) A computer program product as claimed in claim [2]1, 
wherein said master 

malware definition data is also used to protect said fixed location computing device fi'om 
malwaze. 

15. (Currently Amended) A computer program product as claimed in claim [2]1» 
wherein said fixed location computmg device is connected to said data source by a fixed 
internet link. 

1 6. (Original) A computer program product as claimed in claim 1 , wherein said items 
of malware include one or more of a computer virus, a worm, a Trojan, a banned 
computer file, a banned word and a banned image. 

1 7. (Currently Amended) A method of generating mobile computing device malware 
definition data for use by a mobile computing device malware scaimer executable upon a 
mobile computing device, said method comprising the steps of; 

obtaining firom a data source master malware definition data, said master malware 
definition identifying a plurality of items of malware each belonging to one of a plurality 
of classes of n^ware threat; 

identifying one or more classes of malware threat against which said mobile 
computing device is to be protected; and 

generating fi'om said master malware definition data said mobile computing 
device malware definition data, said mobile computing device malware definition data 
identifying items of malware identified within said master malware definition data which 
are within classes of malware direat against which said mobile computing device is to be 
protected; 

wherein said steps of obtaining, identifying and generating are performed bv a 
fixed location computing device, said fixed location computer bemp op erable tn transfer 
to said mobile computing device one or more computer files inftlndin p ; at least a computer 
file containing said mobile computer device malware definition data: 
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v^erein said fixed locatio n computing device stores wofile data identifying on g 
or more different types of mobile co mputing device to which said fixed location 
computing device mav transfer co mputer files and corresponding threat data identifvinp 
one or more classes of malware threat to which each of said mobile computing devices is 
vulnerable: 

wherein only a subset of said master malware definitioD is used to generate said 
mobile computing device malware definition da ta for tailnrin p. said mobile computing 
device malware defin ition data to accommo^i^ onlv mabviae threats to which said 
mobile computing dev ices is vulnerable . 

18. (Cancelled) 

1 9. (Currentiy Amended) A method as claimed in claim [1 8117. wherein said fixed 
location computing device is a user computer having communication link with said 
mobile coinputing device. 

20. (Currently Amended) A method as claimed in claim [1 8] 17, wherein, when said 
mobile computing device is connected to said fixed location computing device, different 
versions of user generated computer files respectively stored by said mobile computing 
device and said fixed location computing device are iivnQhrQmga d's vnfitimniyp.H 

21. (Currentiy Amended) A method as claimed in claim 20, \irti»ein said mobile 
computing device malware definition data is twnsfcircd from said fixed location 
computing device to said mobile computing device during said 
SVnohroaiflati on svT^t^hrnti^^g ^yQ 

22. (Original) A method as claimed in claim 20, when said mobile computing device 
is connected to said fixed location computing device, versions of said mobile computing . 
device malware definition data stored on said mobile computing device and said fixed 
location computing device are compared, and, if said fixed location computing device has 
a more up-to-date version of said mobile computing device malware definition data, tiien 
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said more up-to-date version of said mobile computing device malware defimtion data is 
transferred from said fixed location computing device to said mobile computing device. 

23. (Cancelled) 

24. (Currently Amended) A method as claimed in claim [23] 17, wherein user 
controlled policy data is used in combination with said threat data to control against 
which classes of malware threat said mobile computing device is protected by said 
mobile computing device malware definition data. 

25. (Currently Amended) A method as claimed in claim [23112, wherein said 
different types of mobile computing device correspond to different types of operating 
system computer program used by mobile computing devices. 

26. (Currently Amended) A method as claimed In claim [23]17, v/berwx said fixed 
location computer device detects to whidi mobOe computing devices it may transfer 
computer files by detecting installation \xpon said fixed location computing device of one 
or more transfer controlling computer programs operable to control transfer of computer 
files to one or more predetermined mobile computing devices. 

27. (Currently Amended) A method as claimed in claim [1 8]17, wherein fixed 
location computing device also transfers a malware scanner computer program &ota said 
data source to said mobile computing device. 

28. (Currentiy Amended) A method as claimed in claim [1 8] 17, wherein said fixed 
location computing device checks for updated master malware definition data becoming 
available fiom said data source and, if such updated master malware definition data 
becomes available, tiien repeats said steps of obtaining, identifying and generating. 

29. (Original) A method as claimed in claim 27, wherein said fixed location 
computing device checks for an iqpdated malware scanner computer program becoming 
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available from said data source and, if such an updated malware scanner cotnputer 
program become available, then obtains said updated malware scanner computer program 
for transfer to said mobile computing device, 

30. (Cuirently Amended) A method as claimed in claim [1 8117, wherein said master 
malware definition data is also used to protect said fixed location computing device fiom 
malware. 

3 1 . (Currently Amended) A method as claimed in claim [ 1 8] 12, wherein said fixed 
location computing device is connected to said data source by a fixed internet link. 

32. (Original) A method as claimed in claim 17, wherein said items of malware 
include one or more of a computer virus, a worni, a Trojan, a banned computer file, a 
bamied word and a banned image. 

33 . (Currentiy Amended) Apparatus for generating mobile computing device malware 
definition data for use by a mobile computing device malvrare scanner executable upon a 
mobile computing device, said ^aratus comprising: 

obtaining logic operable to obtain from a data source master malware definition 
data, said master malware definition identifying a plurality of items of malware each 
belonging to one of a plurality of classes of malware threat; 

id«)tifying logic operable to identify one or more classes of malware threat 
against which said mobile computing device is to be protected; and 

generating logic operable to genaate from said master maJware definition data 
said mobile computing device malware definition data, said mobile computing device 
malware definition data identifying items of malware identified within said master 
malware definition data which are within classes of malware threat against which said 
mobile computing device is to be protected; 

a^erein said obtaining logic, said identifVing logic and said generating logic are 
provided bv a fixed location commutin g device, said fixed location computer heinp 
operable to transfer to said mobile co mputing device one or more computer files 
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ineludinp at least a c omputer file oontainiTip said mobile computer device malware 
definition data: 

wherein said fixed location c omputing device stores profile data identifying one 
or more different types of mobile co mputing device to which said fixed locatioTi 
compulinp dervice ma y transfer computer files and c(»fespondipg threat data identifvinp 
one or more classes of malware threat to which each o f said mobile computing devices is 

wherein on ly a subset, of said master malware definition is used to generate said 
mobile computing device malware de finition data for tailoring said mobile comp utinp 
device malware defini tion data to accommodate only malware threats to which said 
mobile c omputing devices is vulnerab^g . 

34. (Cancelled) 

3 5. (Currently Amended) A comput e r program produo t Aa apparatus a s claufned in 
claim [34]33, wherein said fixed location computing device is a user computer having 
communication link with said mobile computing device. 

36. (Currently Amended) A computer program produc t An apparatus as claimed in 
claim [34]33, wherein, when said mobile computing device is connected to said fixed 
location computing device, different versions of user generated cwnputer files 
respectively stored by said mobile computing device and said fixed location computing 
device are s ynohronis e ds vnehromze^. 

37. (Cuii«itiy Amended) A oomputor progtun p redwe tAn apparatus a s claimed in 
claim 36, wherein said mobile computing device malware definition data is transferred 
&ota said fixed location computing device to said mobile computing device during said 
svnohrQniflatinTi;fY "'^''<-9'?^aitifm 

38. (Currentiy Amended) A oomputor profjram pr «Aie tAn apparatus as claimed in 
claim 36, when said mobile computing device is connected to said fixed location 
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computing device, versions of said mobile computing device malware definition data 
stored on said mobile computing device and said fixed location computing device are 
compared, and, if said fixed location computing device has a more up-to-date version of 
said mobile computing device malware definition data, then said more up-to-date version 
of said mobile computing device malware definition data is transfewed fi^m said fixed 
location computing device to said mobile computing device, 

39. (Cancelled) 

40. (Currently Amended) A computer program produo t An apparatus as claimed in 
claim wiierein user controlled policy data is used in combination with said threat 
data to control against which classes of malware threat said mobile computing device is 
protected by said mobile computing device malware definition data. 

41 . (Currently Amended) A computer program produ e t A n aooaratu^ a s claimed in 
claim [39J33, wherein said different types of mobile computing device correspond to 
different types of operating system computer program used by mobile computing devices. 

42. (Currently Amended) A oomputor - prbcram produo tA n apparatus a s claimed in 
claim [39]33, wherein said fixed location computer device detects to which mobile 
computing devices it may transfer computer files by detecting installation upon said fixed 
location computing device of one or more tratisfer controlling computer programs 
operable to control transfer of computer files to one or more predetermined mobile 
computing devices. 

43. (Currently Amended) A computer program produo t An apparatus as claimed in 
claim [34]33, wherein fixed location computing device also transfers a malware scanner 
computer program ftom said data source to said mobile computing device. 

44. (Currently Amended) A computer program produc t An apparatus as claimed in 
claim [34]3i \N*erein said fixed location confuting device checks for updated master 
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malware definition data becoming available fojm said data source and. if such updated 
master malwarc definition data becomes avaflable, then repeats said steps of obtaining, 
identifying and generating. 

45. (Currently Amended) A n ompntor pxpft i um u i u Jmi i An appaTatus a.<; claimftH in 
claim 43, wherein said fixed location computing device checks for an updated malware 
scanner computer program becoming avaUable from said data source and, if such an 
updated malware scanner computer program become available, then obtains said updated 
malwarc scanner computer program for transfer to said mobile computing device. 



m 



46. (Currently Amended) A rn mputcr proA i oi i i p iu Ju o LAn aoparania m claimeH 
claim [34]33. wherein said master malware definition data is also used to protect said 
fixed location computing device from malware. 

47. (New) The computer program product as claimed in claim 1, wherein said fixed 
location device stores policy data including user defined settings Identifying the manner 
in which said profile data is to be interpreted. 

48. (New) The computer program product as claimed in claim 1, wherein said one or 
more classes of malware threat agamst which said mobile computing device is to be 
protected are chosen according to classes of malware threat known to pose a problem to 
said mobile computing devioe and classes for which it is desired to protect said mobile 
c<anputing device according to user d^ned policies. 
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